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Method and Apparatus for Creating Connections in Networks 

The present invention relates to a method and apparatus for creating links in networks. In 
particular but not exclusively, the invention is applicable to dynamic networks such as ad- 
5 hoc and/or parasitic networks which may be used as communications networks. 

Dynamic network protocols have many applications some of which are short term and 
others more permanent. Short term networks might be deployed in a situation where a 
"high-tech" team (requiring reliable information exchange between sub-units) is deployed 
10 in a "low-tech" environment (featuring insufficient telecom infrastructure). Examples are: 
o Scientific expeditions or natural resources survey in vast unpopulated areas; 
o Humanitarian operations in third-world countries; 

o "Search and rescue" missions when natural catastrophe has disabled normal 
communications or in remote areas; and 
15 o Military operations. 

A definition of an ad hoc network in "Routing in Ad Hoc Networks of Mobile Hosts", D.B. 
Johnson, Proceedings of the Workshop on Mobile Computing Systems and Applications, 
pages 158-163, 1994, is "a collection of wireless mobile hosts forming a temporary 
20 network without the aid of any centralised administration or standard support services 
regularly available on the wide-area network to which the hosts may normally be 
connected". In general ad hoc networks provide robust and adaptive solutions to a variety 
of wireless communications-related problems. Applications may be short or long-term 
solutions i.e. temporary or permanent networks. 

25 

A technical development that has an influence on topology is the ever-increasing role of 
wireless communication in data networks. Indeed, the future of mobile computing in 
general, and the use of 3G mobile phones as web-accessing devices in particular, will 
involve huge amounts of data being carried by radio waves rather than travelling along 

30 physical connections (see e.g. the "Bluetooth" architecture as summarised in Haartsen et 
a/., 1998, and its future developments as described in Lee and Lee, 2000). This provides 
a challenge to planning well-defined architecture for the global information network since, 
by definition, mobile devices keep moving from one base station to the next, which means 
the topology is continuously changing. As long as the higher level nodes are static and 

35 physically interconnected, it is likely that the effect will remain fairly limited. Yet more 
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wireless links being created "on demand", not only between endpoints and base stations, 
but also between relays themselves. Furthermore, the trend to include "intelligent" 
functions in all kind of electronic devices is likely to result in what is today a simple 
endpoint (mobile phone) actually becoming the central relay of a miniature individual 
5 domain ("piconet"). It seems that this natural evolution toward a more transparent access 
to all kinds of online services will see ad hoc and parasitic networks gradually replacing 
static and well-differentiated architectures. All these reasonable projections about 
information networks strongly suggest that the Internet will progressively be turned into a 
vast collection of dynamic links between mobile, unspecialised nodes. 

10 

Such networks, termed peer to peer networks (p2p), are defined as distributed sets of 
client and server machines that have many peer relationships in addition to possible 
hierarchical or centralised connections. Designing the topology and connection rules for 
such p2p networks is therefore more difficult than existing networks and few established 
1 5 protocols exist for achieving optimised p2p network designs. For example, the Groove 
peer-to-peer platform utilises a broadcast messaging method to establish initial 
connections between local nodes. 

Current p2p designs recognise the need for scalability (a known failure of systems like 
20 Gnutella), and methods exist to achieve this using partially centralised resources to act as 
relay services, (Examples include JXTA from SUN and Groove networks). The Gnutella 
network currently uses two methods for controlling connectivity and capacity for flooding. 
A client node can manually select the maximum number of connections allowed to itself 
and can also select the maximum time to live of the packet requests transmitted by the 
25 client, which limits flooding. 

According to embodiments of the invention, there is provided a node having a connection 
(link) to one or more other nodes in a network, said node being operable in response to 
the or each link failing to identify other nodes with which a link may be formed, and to 

30 select one of said other nodes which to form a link on the basis of the connectivity of the 
other node. The node may preferentially select to form a link with the other node which 
currently has the most links or alternatively with the other node which is capable of 
forming the most links. In this context, therefore, the term connectivity refers to both the 
actual number of connections and/or the potential number of connections of a node. 

35 Advantageously, this link reallocation algorithm can be implemented as locally defined 
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rules within a network, and therefore does not require global routing tables or knowledge 
of the overall network specific topology. 

When one or more links of a node fail the relevant channels then become free and the 
5 node immediately begins to broadcast that information. Providing that all other nodes 
which also have a free channel respond to the broadcast, the first node can detect these 
and initiate a new connection. This results in considerably increased robustness for a 
given number of channels in the initial structure (because they can be reallocated when 
one of their endpoints fails, creating "on-demand" backups). Obviously, this is not possible 
1 0 if the links are physically implemented, but it is feasible in both wireless communication 
systems and logical structures like the WWW (relocation of web pages and hyperlinks. 

The plasticity of "immaterial" networks, a direct consequence of allowing dynamic re- 
mapping of connections between existing nodes, has been emphasised by several 

1 5 authors, in the case of hyperlinks for example (Tadic, in press). Similarly, but focusing on 
the robustness issue, an obvious advantage of wireless networks on their physical 
counterpart is that a broken link is not, in essence, a dead connection: when one relay 
ceases to function, the communication channels it maintained with its first neighbours 
become available for initiating new links. SHINTo (Self-Healing Information Network 

20 Topology) tries to take advantage of this property to restore global cohesion after node 
failure, by advertising the fact that a channel is free and re-allocating new links. In 
contrast, in some prior art networks redundancy was used to improve the robustness of 
the network to node failure. Redundancy means the provision of additional links between 
nodes so that several routes exist between end points. Accordingly, the failure of one 

25 node does not necessarily mean that a route between two other nodes has been broken 
since additional routes between the nodes exist. However, the implementation of wide 
scale redundancy throughout a network can be expensive and therefore an unattractive 
option, particularly if some of the extra links are not used and remain idle. In fact, SHINTo 
shares several common traits with this basic form of redundancy in that it can provide 

30 alternative routes between end points in the event of link failure. However, its main 
advantage is that it is only invoked when necessary (and therefore doesn't require idle 
connections to be maintained in normal circumstances). 

In fact, a highly effective solution is. the combination of the reallocation algorithm with 
35 partial redundancy (for example, one extra link for every four nodes). The reallocation 
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algorithm demonstrates that the application of local decision rules in a partially redundant 
topology can not only effectively replace systematic link backup, but actually outperforms 
it in terms of overall robustness (see Figure 6 later). Furthermore, the reconnection 
algorithm is not complex and can be implemented in individual nodes at a negligible cost, 
5 particularly compared to that of large-scale redundancy. 

Embodiments of the present invention will now be described by way of example with 
reference to the accompanying drawings in which: 

figure 1 is a schematic representation of nodes in a network; 

1 0 figure 2 is a schematic representation of the largest set of interconnected nodes in a 
network after the network has been subjected to node linkage failure; 

figure 3 flow charts illustrating the behaviour of a node illustrated in a network according to 
an embodiment of the present invention; 

figure 4 is a schematic representation of the largest set of interconnected nodes in a 
1 5 network after the network has been subjected to node linkage failure where the nodes 
operate according to an embodiment of the present invention; and 

figures 5a, 5b and 6 are graphs illustrating the performance of networks having nodes 
according to an embodiment of the invention relative to networks comprised of other 
nodes. 

20 

Figure 1 is a schematic representation of a network A comprising 128 nodes 1-128. Each 
node is connected by links (shown in figure 1 as lines between the nodes 1-128) to one or 
more other nodes to provide the network. Furthermore, each of the nodes 1-128 is mobile 
and has a limited range over which it can communicate with other nodes 1-128 in the 
25 network A. Over time nodes will move relative to each other resulting in the possibility of a 
given node moving in out of range with other nodes in the network A with which it is 
connected. This will result in one or more of the connections between the nodes being 
broken or lost. In other words, the topology (connection pattern) of the network A is 
dynamic. 

30 

In addition to nodes moving out of range of the connected nodes, connections may also 
be lost for other reasons. For example, a node may breakdown or be switched off or 
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simply drop its capacity to maintain network connection because it requires its system 
resources for other tasks. Similarly, one or more nodes could be the target of an attack 
with the purpose of affecting the functioning of the network. 

5 Regardless of the reasons for the connection failures, as they occur, the network topology 
changes. The network can even be split into a number of sub-networks. The more 
connections are lost, the less useful the network since it connects fewer nodes with fewer 
links and thus has a reduced capacity. In the present embodiment, a measure of the 
decay of the network is obtained from S = nVn, where S is the fractional size of the largest 
1 0 sub-group of interconnected nodes in the network, n being the total number of nodes in 
the network and n' being the number of interconnected nodes in the largest sub-network. 
Therefore, for the network A in figure 1, S = 1.0. Observation of the evolution of S in 
response to a predetermined number of node failures (i.e. nodes losing their connections 
for the reasons outlined above) therefore gives a measure of the decay of the network. 

15 

Figure 2 illustrates the same network A as figure 1 after it has been subjected to fifty node 
failures. Figure 2 shows only the largest of the sub-networks into which the original 
network has developed. In other words, the isolated nodes or groups of nodes are not 
shown. The value of S for the network A in the state shown in figure 2 is 0.5. In other 
20 words, the effective network size has reduced to 50% of the maximum possible. This level 
of decay of the network A will result in a very significant drop in the capacity and coverage 
of the network. 

In the present embodiment however, each node is programmed to react to the loss of one 
25 or more connections and to initiate attempt to reconnect to the network. Figure 3 shows a 
flow chart which represents the programmed behaviour of each node that is triggered by 
the loss of one or more connections at a given node. As noted above, each node starts 
the process when the loss (for whatever reason) of a link is detected and the processing 
starts at step 301. In step 301, the node compiles a message which includes the nodes 
30 unique identifier (ID) in the network and the number of free connections the node has. 
Processing then moves to step 303 at which the ID message is broadcast to all nodes 
within range and the node listens for any incoming ID messages from other nodes 
indicating that they have a spare link. All nodes are programmed to listen for ID messages 
when they have a spare link. Processing then moves to step 305 at which the incoming ID 
35 messages are analysed. 
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The node can act in one of three modes in response to the analysed messages. In the 
first mode the node will make links with each other node as the messages arrive until the 
node has replaced all the failed links. In the second mode, if after a predetermined period 
5 the node has received a greater number of ID messages than the node has links to repair 
then the node forms links first with those other nodes that have most links. In the third 
node, if after a predetermined period the node has received a greater number of ID 
messages than the node has links to repair than the node forms links first with those other 
nodes that have the capability of forming the most links. Each of the three modes can 
1 0 prove more effective in different circumstances. The connections with the accepted nodes 
are made at step 307. 

Processing then moves to step 309 where a check is carried out to see if any links remain 
free. If not, processing moves to step 311 and ends. If free links remain then processing 
15 returns to step 303 and process of steps 303, 305, 307 and 309 repeats. After a 
predetermined time however, if processing return to step 303 the processing quits by 
jumping to step 311. This timeout avoids nodes broadcasting indefinitely when there are 
no other nodes within range that have a free link also. 

20 Figure 4 shows a repeat of the results of fifty node failures on the network A except that in 
this case the nodes in the network have been programmed to behave in accordance with 
the algorithm illustrated with reference to figure 3. As is evident from figure 4, the network 
has degraded to a much smaller degree that the network of figure 2. In fact, the decay can 
be observed for this network with reference to S = 0.96. In other words the network has 

25 only reduced to 96% of its maximum possible size. 

Figures 5a and 5b are graphs which show a comparison between the cohesion (or decay) 
of networks either implementing the reconnection procedure in the third mode (labelled 
"with SHINTo") or not, when submitted to random failure of nodes (figure 5a) and attacks 

30 directed at particular nodes (figure 5b). The graph show the size of the giant component 
(i.e. the largest set of interconnected nodes) as a proportion of the network remaining 
after various fractions of the original network of nodes have been removed. These 
comparisons show that the reallocation procedure proves capable of increasing network 
robustness to a considerable extent. On average, it manages to raise the size of the giant 

35 component of a typical scale free network by more than a factor 2 when only 50% of the 
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vertices are left (see figure 5a). This result is particularly good when considering that only 
local information is used and no "global emergency reconnection plan" is invoked in the 
process. Taking into account the difficulty of planning appropriate response to relay failure 
in complex architectures, this kind of self-reconstruction appears useful because of its 
5 simplicity. Indeed, since one only has to fit every node with the corresponding adaptive 
behaviour to maintain the same level of cohesion, this decentralised solution need not 
take into account the combinatory explosion usually encountered in network management 

In order to reallocate a broken link, each node has to find a new partner. Often, it is found 
among those who have also obtained a free channel through the disappearance of the 

1 0 same relay or node, which happens to be a common neighbour. If the reconnection rule is 
kept simple, for example by operating in the first mode, and many nodes only maintain a 
single link with the original network (/n=1), this might sometimes result in the unfortunate 
situation where 2 endpoints bind together, forming an isolated dipole in the network. 
Obviously, this is no good for the cohesion of the giant component, since all those 

1 5 "couples" actually form as many isolated systems that are in fact separated from the main 
network. The reallocation algorithm operating in the second mode alleviates this problem 
because of the non-linearity embedded in the reconnection rule, whereby those potential 
partners which are more highly connected (secondary relays) are also more likely to be 
selected. Yet when the total number of links is equal to the number of nodes minus one 

20 (no redundancy), the options can effectively be extremely limited, and can still lead to 
unavoidable splitting of the network. 

On the other hand, partial redundancy alone in the network fails to strongly increase 
robustness because there is no guarantee that alternative links are suitably located (from 
a topological point of view) to backup critical relays, and therefore capable of limiting the 
25 impact of the removal of these relays on the size of the giant component. 

In a wireless environment implementing a dynamic reallocation algorithm, those 
potentially ineffective backup connections can often be remapped into a more suitable 
topology. Consequently, combining the reallocation algorithm with partial redundancy in 
the network provides a successful strategy. 

30 Figure 6 is a graph showing the relative performance of a fully redundant (m = 2, where m 
is the average number of links per node) but non-dynamic architecture (without SHINTo) 
compared with the use of the dynamic reallocation algorithm described above (operating 
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in the second mode) in a partially redundant environment (1<m<2). The graph shows how 
the giant component size varies with the fraction of network removed when submitted to 
directed attack. These simulations show that the reallocation algorithm described in the 
above embodiment operating in a partially redundant architecture (m=1 .5 and m=1 .25) is 
5 able to outperform a stronger redundancy (m=2) which does not implement dynamic 
reallocation of broken links. 

The application of the reallocation algorithm can progressively turn a scale free network 
(sensitive to attack) into a random network (more resistant), when subject to directed 

1 0 attack. This is because the most highly connected nodes are targeted first and, in the 
case that the nodes cannot have more links than they originally had, the reallocation 
algorithm (even operating in the second node for preferentially reconnecting to highly 
connected nodes) cannot succeed in rebuilding a scale-free network because of 
constraints on the number of links per node. This consequently results in a gradually more 

15 random topology. The reallocation algorithm can also strongly reduce the effect of 
random failure on the relative size of the giant component. In short, a wireless scale free 
network implementing the dynamic link reallocation algorithm behaves like a random 
network when under attack, and even better than a conventional scale free network when 
suffering from random node failure. 

20 

The inventors have established the optimum value for N (the number of links that a node 
can form) is thought to be 3 links. This figure maintains high levels of cohesion in the face 
of dynamic node creation and removal or failure. It also provides a low path length 
between any two nodes, see table of results. Note that for the single connection case the 
25 network is completely severed by the node failures, hence the path lengths are of no 
value. 

There is also another element on which we didn't insist in the detailed description of our 
preliminary findings, because we chose to focus on the most traditional definition of 
30 robustness (resilience to attack/failure). Yet it should also be emphasised now that in 
wireless networks of mobile hosts, this particular problem is closely related to the more 
general issue of topological plasticity. Indeed, in an architecture where relays and/or 
endpoints are constantly moving within and out of range of each other, links are not only 
broken when nodes cease to function, but as a part of normal network operation. In this 
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context, the repair algorithm has a much wider field of application than protection against 
attack/failure. 

It will be understood by those skilled in the art that the apparatus that embodies the 
5 invention could be a general purpose device having software arranged to provide the an 
embodiment of the invention. The device could be a single device or a group of devices 
and the software could be a single program or a set of programs. Furthermore, any or all 
of the software used to implement the invention can be contained on various transmission 
and/or storage mediums such as a floppy disc, CD-ROM, or magnetic tape so that the 
TO program can be loaded onto one or more general purpose devices or could be 
downloaded over a network using a suitable transmission medium. 

Unless the context clearly requires otherwise, throughout the description and the claims, 
the words "comprise", "comprising" and the like are to be construed in an inclusive as 
1 5 opposed to an exclusive or exhaustive sense; that is to say, in the sense of "including, but 
not limited to". 
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CLAIMS 

1 A node for a network, said node being operable to maintain a link to one or more other 
nodes in a network and being further operable, in response to the or each link failing to: 
5 identify one or more other nodes with which a link may be formed; and 

select from a plurality of identified other nodes a node with which to form a link on 
the basis of the connectivity of the other node. 

2. A node according to claim 1 which is further operable, in response to a link failure to 
10 transmit a message to one or more other nodes in the network identifying the node and 

the fact that a link is free. 

3. A node according to any of claims 1 or 2 in which the node is operable in response to 
the receipt of a message from an other node, to identify that other node as a candidate for 

1 5 forming a link. 

4. A node according to any preceding claim in which the node is operable to form a link 
with the identified other node that has most links. 

20 5. A node according to any preceding claim in which the node is operable to form a link 
_ with the identified other node that has the capability of maintaining the most links. 

6. A method of operation of a node in a network, comprising the steps of: 
maintaining a link to one or more other nodes in the network; and 
25 in response to the c>r each link failing to: 

identify one or more other nodes with which a link may be formed; and 
select from a plurality of identified other nodes a node with which to form a 
link on the basis of the connectivity of the other node. 

30 7. A method according to claim 6, further comprising the step of: 

in response to a link failure, transmitting a message to one or more other nodes 
in the network identifying the node and the fact that a link is free. 

8. A method according to either of claims 6 or 7, further comprising the step of: 
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in response to the receipt of a message from an other node, to identify that other 
node as a candidate for forming a link. 

9. A method according to any of claims 6 to 8, where the step of selecting a node 
5 comprises selecting the node on the basis of which of the identified other nodes has the 

most links. 

10. A method according to any of claims 6" to 8, where the step of selecting a node 
comprises selecting the node on the basis of which of the identified other nodes is 

1 0 capable of maintaining the most links. 

11. A storage medium carrying computer readable code representing instructions for 
causing a device having a processor to operate as a node according to any of claims 6 to 
10 when said instructions are executed by the processor. 

15 

12. A computer data signal embodied in a carrier wave and representing instructions for 
causing a device having a processor to operate as a node according to any of claims 6 to 
10 when the instructions are executed by the processor. 

20 13. A storage medium carrying computer readable code representing instructions for 
causing a device having a processor to model the behaviour of a network comprising a 
plurality of nodes operating according to any of claims 6 to 10 when said instructions are 
executed by the processor. 

25 14. A computer data signal embodied in a carrier wave and representing instructions for 
causing a device having a processor to model the behaviour of a network comprising a 
plurality of nodes operating according to any of claims 6 to 10 when the instructions are 
executed by the processor. 

30 15. A method of operation of a node in a network substantially as hereinbefore described 
with reference to the accompanying drawings. 

16. A node for a network substantially as hereinbefore described with reference to the 
accompanying drawings. 

35 
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